Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/B016290E2CE211EC8664D47EC4F9AE02.roa
File:                     B016290E2CE211EC8664D47EC4F9AE02.roa (raw, json)
Hash identifier:          XSnUK976UXwYHciWW5wccgOD7fOjMode6M1FzFFnvQ4=
Subject key identifier:   D1:AE:C4:98:BC:BA:B1:C6:1F:48:7F:B1:E3:72:0F:EB:00:28:45:43
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       0507
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/B016290E2CE211EC8664D47EC4F9AE02.roa
Signing time:             Tue 09 Sep 2025 00:05:29 +0000
ROA not before:           Tue 09 Sep 2025 00:05:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4618
IP address blocks:        182.54.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Sep  9 00:05:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68bf6f49-1c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:2d:a7:da:96:92:31:81:f3:bf:f5:b5:11:
                    90:24:8d:0b:51:b7:e8:fc:e9:2d:8d:b9:88:92:22:
                    98:23:ff:ff:ca:f5:ad:b4:eb:8a:54:ca:9e:d3:72:
                    1f:9e:16:6a:31:12:93:99:ea:fc:42:c5:bf:cd:04:
                    a2:82:ed:b9:ba:f4:a1:e7:00:26:22:9a:b9:7c:ad:
                    06:51:06:db:3d:c6:87:d2:86:6d:fc:3f:31:1e:0d:
                    e6:b5:1c:3e:c8:7b:9e:7b:7f:9b:27:2a:3e:11:c8:
                    67:78:a0:59:bd:5c:65:ee:53:de:b2:b2:f7:f6:10:
                    4d:ea:ee:58:27:88:22:df:bc:33:e2:74:6c:19:4d:
                    dc:39:c0:13:b8:fb:a5:33:91:a2:7b:97:ae:6a:1c:
                    74:6e:44:59:5c:3c:b2:78:87:68:9d:44:b8:e2:a7:
                    90:45:c4:a7:fe:9e:c2:f6:da:1f:af:76:43:75:51:
                    8c:40:07:37:91:88:75:9d:39:ff:1c:ae:50:93:33:
                    0b:2e:ec:58:63:97:31:d3:40:8b:c2:86:e2:47:a6:
                    41:5b:3d:b3:53:82:6d:78:84:12:61:46:ff:0f:f4:
                    02:7a:b3:c5:2e:ca:2c:43:70:05:1a:90:a8:ce:bb:
                    20:b3:55:43:66:df:dc:85:22:91:be:17:1a:69:33:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AE:C4:98:BC:BA:B1:C6:1F:48:7F:B1:E3:72:0F:EB:00:28:45:43
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/B016290E2CE211EC8664D47EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:94:97:76:6f:5d:fb:f6:83:46:ec:3e:cc:c1:f9:7a:7f:48:
         ed:df:2f:1e:bd:c5:f1:5c:59:a9:5a:d1:e6:40:ac:fa:3b:84:
         3a:50:62:e9:00:99:cf:da:ad:61:34:68:a6:14:27:5b:f4:a9:
         40:50:e8:38:67:c3:61:86:51:60:b4:d6:19:ca:8f:3e:ca:22:
         93:0f:79:97:d2:f3:ab:7c:22:b8:13:4a:cf:a9:f3:d9:11:04:
         88:f5:dc:39:4f:79:5e:63:c5:7e:b5:c7:16:15:50:d8:d8:42:
         ac:b3:55:b3:e5:57:ba:ea:17:ad:59:f7:eb:18:62:7c:f1:e2:
         ef:3d:09:b4:74:9e:7e:53:6a:5d:db:92:c9:f5:bb:5a:6d:a6:
         71:61:53:2a:09:8d:aa:0a:03:d8:5b:91:29:67:1d:41:a5:c4:
         3a:f9:3f:fb:0c:b9:9a:e4:d0:e8:42:42:22:65:83:27:4c:d7:
         00:1b:cd:0e:d2:ae:66:3b:ae:dc:99:e9:6c:57:7c:9c:54:a7:
         21:8c:6f:f6:6e:80:8e:2b:20:a4:f3:8e:a4:02:92:99:4a:06:
         e2:0e:46:c5:ca:3a:3d:ca:66:e4:01:60:7f:c0:f6:a8:b9:84:
         c5:df:30:34:14:f3:56:3b:48:99:56:e1:cd:26:da:10:ae:c8:
         16:d9:62:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:53:02 2025 by rpki-client